Adds X-Content-Type-Options, X-Frame-Options, Referrer-Policy, and X-XSS-Protection headers to all responses.
Add session manager and encurl generator to handlers. Register /, /logout, /generate, /v1/e/{token}, /static/* routes.